Senior Information Security Officer in Kennington

About usInformation Services Division (ISD) is the primary provider of IT services to UCL.
The following information provides an overview of the skills, qualities, and qualifications needed for this role.
We support and enhance learning, teaching, research and administrative processes by providing information- and technology-related services to over 50,000 staff and students of UCL and associated institutions.
Our ambition is to be the leading IT services group in the Higher Education (HE) sector and we are growing our team’s capability in experience/UX, agile development, security, cloud, service management and partnering.We are modernising our technology foundations, digitising the processes of the university to transform experience for students and staff, and partnering across the university to drive differentiation in UCL education and research.UCL boasts a track record of ground-breaking research that transforms the lives of people around the world.
Our teams provide dedicated, specialist support throughout the research and innovation lifecycle to help sustain and advance UCL’s position as a world-class, research-led university.About the roleWithin ISD, this post is in the Information Security Group, which leads on all aspects of security at UCL.
The role sits within Security Operations, which is responsible for security monitoring, incident response, vulnerability management and threat intelligence.Working under the direction of the Cyber Threat Management Lead, you will lead day-to-day threat intelligence, threat hunting and detection engineering activity.
You will help maintain UCL’s intelligence requirements and threat model, produce actionable intelligence, plan and conduct threat hunts, and identify opportunities to improve detection coverage against priority threats.You will work closely with analysts, technical teams, service providers and stakeholders across UCL to turn intelligence, hunt findings and incident evidence into practical improvements to detections, playbooks, tooling and security controls.
You will also provide coaching and direction to colleagues, communicate complex threat information clearly, and support evidence-based decisions about UCL’s defensive posture.About youAs the ideal candidate you will have a mix of the following skills and experience:Significant experience in cyber threat intelligence, threat hunting, detection engineering, SOC operations, incident response support or related operational security work.Strong knowledge of intelligence requirements, threat modelling, intelligence cycles, analytical methods and the production of actionable intelligence.Strong knowledge of threat hunting and detection engineering methods, including hunt planning, telemetry analysis, detection coverage, custom detections and false-positive management.Experience using relevant security tooling and platforms, such as SIEM, TIP, SOAR, CTEM, intelligence collection platforms, reporting platforms and related monitoring or investigation tools.Experience using threat intelligence, hunt findings, incident findings or other operational evidence to improve detections, reporting, playbooks, tooling or controls.The ability to analyse complex or incomplete threat information and support timely, data-led decisions.Experience coordinating intelligence, hunting or detection engineering activity across analysts, technical teams, suppliers and stakeholders.Strong written and verbal communication skills, with the ability to explain threats, detection gaps, hunt findings and recommended actions to technical and non-technical audiences.The ability to organise and prioritise multiple activities, maintain accurate documentation, and ensure actions are clearly assigned, tracked and completed.Experience providing day-to-day leadership, coaching, knowledge sharing or technical direction to colleagues.What we offerAs well as the exciting opportunities this role presents, we also offer some great benefits some of which are below:41 Days holiday (27 days annual leave 8